Topic: Mod_security 2.9.7 VS17 available

[Steffen]

09 Januari 2023 Updated to 2.9.7, see below

Only for VS17.

But it runs with VS16. VS16and VS17 are compatible.

2.9.6 has now official the fix for mlogc included.

Build with LUA 5.3.6(VS16 5.2.4) libxml2-2.10.3(VS16 2.9.12) pcre-8.45 yajl-2.1.0 curl-7.86.0(VS16 7.80.0)

Changes in 2.9.6 see: https://github.com/SpiderLabs/ModSecurity/releases

Documentation at https://github.com/SpiderLabs/ModSecurity/wiki


Do not forget to copy yajl.dll to the apache /bin folder !

[Steffen]

Updated to VS17 2.9.7 (VS16 compatible)

Changes in 2.9.7 see: https://github.com/SpiderLabs/ModSecurity/releases

Most noticeable change it that it is now build with PCRE2-10.40.

[Unity]

Hi everyone,
Does anyone here use modsec with a non english OS ?
With a french OS, the default system user is named système. The problem is that the module is using the "accountname-ip" for the DBM file. The module doesn't work because the user name contains an "è" :

Message: collection_store: Failed to access DBM file "C:/Program Files/Internet/tmp/Syst\xe8me-ip": Invalid argument

Of course, i can use another account on my system, but i can't do that elsewhere.
Is there a way to use the computer name or something else for this file ?

Thank you

[nono303]

Hi @Unity
Same French accent problem for me…
Either you change the user executing httpd or you patch 'char* userinfo' value with what you want in https://github.com/SpiderLabs/ModSecurity/blob/v2/master/apache2/persist_dbm.c#L111

[nono303]

…Dealing with the DBM file, does somebody @here know how to have a dashboard of blocked IP (with entry time, counter & expire…)?
I didn’t find an existing way to have this dashboard as a hook on mod_status (like it is with mod_fcgid or mod_md for exemple)
The not good thought solution is to read the file with dbmopen (php, perl, python,java...) and produce a dirty html table page.
Any idea or existing solution will be welcome!

[admin]

@momo303 Is your DBM question related to mod_security ?

[nono303]

Yes @admin,
the xxx-ip.pag file created by mod_security2 in SecDataDir configured path

[Unity]

Hi @nono303, no easy way out then.
Thank you.